Re: portspoof IDS trouble

[Henri Doreau <henri.doreau () gmail com>]

2014-05-24 21:11 GMT+02:00 Andrew Oko-odion <andrewokoodion () gmail com>:
> please is there an nmap work around for false positive IDS like portspoof
> tool, please I will like to know.
>
> portspoof is ruining all my nmap scans.
>
> the tool is at portspoof.org

A possible approach is to patch nmap to make it forget about every
host that have more than X (or X%) of open ports. That would be a nice
contribution actually! Would you or one of our GSoC feature creepers
be interested? If not I have such a patch somewhere but it would need
some improvement before it can be considered for inclusion.

-- 
Henri
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/